Java deserialization vulnerability - Apache Commons collections2 templatesimpl attack chain
preface
CC1 was analyzed earlier. Continue to learn today and analyze CC2. stay ysoserial In CC2, the PriorityQueue class is used as the entry of deserialization, so I'll analyze it from here.
Vulnerability mining
PriorityQueue
PriorityQueue priority queue is a special queue based on a priority heap. It defines "priority" for ...
Posted by mchip on Sun, 27 Feb 2022 17:27:06 +0100
EFAK - Kafka visual management tool
preface
What is EFAK
EFAK (Eagle For Apache Kafka, formerly known as Kafka Eagle) EFAK is an open source visualization and management software. kafka cluster can be queried, visualized and monitored. It is a tool to convert kafka cluster data into graphic visualization.
Why EFAK
Apache Kafka does not officially provide monitoring systems o ...
Posted by lamia on Sun, 27 Feb 2022 17:03:38 +0100
Practical exercise 3 (optional): deploy a three copy OceanBase cluster using OBD (offline installation)
Deployment planning
This job is the three node deployment method of OceanBase cluster. Directly and remotely log in to the OceanBase node through the central control computer to deploy and start the observer and obproxy processes.
Since there are exactly seven physical machines on hand, OBD will be directly deployed as an OceanBase cluster wi ...
Posted by scm24 on Sun, 27 Feb 2022 16:10:18 +0100
01spring MVC brief introduction and use
01spring MVC brief introduction and use
1. What is MVC?
MVC is the abbreviation of model, view and controller. It is a software design specification. It is to organize code by separating business logic, data and display. The main function of MVC is to reduce the two-way coupling between view and business logic. MVC is not a design pattern, MV ...
Posted by shams on Sun, 27 Feb 2022 15:47:43 +0100
Object class not ended
Object class is the base class of all classes in Java. It is the top of the whole class inheritance structure and the most abstract class.
Object contains 12 methods: registerNatives(), getClass(), hasCode(), equals(), clone(), toString(), notify(), notifyAll(), wait(long,int), wait(), finalize().
registerNatives()
getClass() ...
Posted by leeming on Sun, 27 Feb 2022 15:29:34 +0100
Java version sequential storage binary tree
PS: This article is a reprint of the article. It will be more readable to read the original text. There is a link to the original text at the end of the articlecatalogue1. Sequential storage binary tree1. Sequential storage binary treeFrom the perspective of data storage, array storage mode and tree storage mode can be converted to each other, ...
Posted by mrbill501 on Sun, 27 Feb 2022 15:23:59 +0100
How does spring solve circular dependency
In the previous article Analysis of the whole process of using hystrix from feign In, the workflow of springboot startup is explained in detail through a figure. I haven't enjoyed it yet. Today, I will analyze the instantiation process of beans and how spring solves circular dependency in detail. The following figure related to bean instantiati ...
Posted by shai1 on Sun, 27 Feb 2022 14:20:45 +0100
Get rid of complex logical calculations and get Aviator
Hello, everyone. I'm your good friend - Xiaofeng^
Introduction to Aviator
Aviator is a high-performance and lightweight expression evaluation engine implemented in java language, which is mainly used for dynamic evaluation of various expressions. Now there are many open source java expression evaluation engines available. Why do you ...
Posted by praeses on Sun, 27 Feb 2022 13:05:45 +0100
2022 winter vacation algorithm summary
1, Introduction to algorithm
1. Simple version
2022-1-11
704. Binary search
Topics and examples Given an n-element ordered (ascending) integer array nums and a target value target, write a function to search the target in nums. If the target value exists, return the subscript, otherwise return - 1.
Example 1: Input: num = [- 1,0,3,5,9,12], ...
Posted by vapour_ on Sun, 27 Feb 2022 11:38:53 +0100
RabbitMQ one is enough
About RabbitMQ
RabbitMQ is an open source message broker software (also known as message oriented middleware) that implements the advanced message queuing protocol (AMQP). RabbitMQ server is written in Erlang language, and clustering and failover are built on the framework of open telecommunications platform. All major programming language ...
Posted by programguru on Sun, 27 Feb 2022 10:48:51 +0100